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FOREWORD 

This Indian Standard was adopted by the Bureau of Indian Standards, after the draft finalized by the Food 
Hygiene Sectional Committee, had been approved by the Food and Agriculture Division Council. 

This Indian Standard is based on the Codex Principles and Guidelines for the conduct of Microbiological Risk 
Assessment [CAC/GL-30(1999)] published by the Joint FAO/WHO Food Standards Programme,Codex 
Alimentarius Commission, Rome and is identical to it. 

Risks from microbiological hazards are of immediate and serious concern to human health. Microbiological 
risk analysis is a process consisting of three components : risk assessment, risk management and risk 
communication, which has the overall objective to ensure public health protection. This Indian Standard deals 
with risk assessment which is a key element in assuring that sound science is used to establish standards, 
guidelines and other recommendations for food safety to enhance consumer protection and facilitate international 
trade. The microbiological risk assessment process should include quantitative information to the greatest 
extent possible in the estimation of risk. A microbiological risk assessment should be conducted using a structured 
approach. 

This Indian Standard has been formulated to provide the principles and guidelines to the government and 
private organizations, and other interested parties who need to prepare a microbiological risk assessment. 

Since microbiological risk assessment is a developing science, implementation of these guidelines may require 
a period of time and may also require specialized training. This may be particularly the case for developing 
countries. Although microbiological risk assessment is the primary focus of this standard, the method can also 
be applied to certain other classes of biological hazard. 
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Indian Standard 

FOOD HYGIENE — MICROBIOLOGICAL 

RISK ASSESSMENT — PRINCIPLES AND 

GUIDELINES FOR THE CONDUCT 



1 SCOPE 



This Indian Standard covers the general principles 
for microbiological risk assessment and guidelines for 
application. 

2 DEFINITIONS 

For the purpose of this standard the following defini- 
tions shall apply, 

2.1 Dose-Response Assessment 

The determination of the relationship between the 
magnitude of exposure (dose) to a chemical, biological 
or physical agent and the severity and/or frequency of 
associated adverse health effects(response). 

2.2 Exposure Assessment 

The qualitative and/or quantitative evaluation of the 
likely intake of biological, chemical, and physical 
agents via food as well as exposures from other sources 
if relevant. 

2.3 Hazard 

A biological, chemical or physical agent in, or condi- 
tion of food, with the potential to cause an adverse 
health effect. 

2.4 Hazard Characterization 

The qualitative and/or quantitative evaluation of the 
nature of the adverse health effects associated with 
the hazard. For the purpose of microbiological risk 
assessment, the concerns relate to microorganisms 
and/or their toxins. 

2.5 Hazard Identification 

The identification of biological, chemical and physical 
agents capable of causing adverse health effects and 
which may be present in a particular food or group of 
foods. 

2.6 Quantitative Risk Assessment 

A risk assessment that provides numerical expressions 
of risk and indication of the attendant uncertainties 
(stated in the 1995 Expert Consultation definition on 
Risk Analysis). 



2.7 Qualitative Risk Assessment 

A risk assessment based on data which, while forming 
an inadequate basis for numerical risk estimations, 
none the less, when conditioned by prior expert 
knowledge and identification of attendant uncertain- 
ties, permits risk ranking or separation into descriptive 
categories of risk. 

2.8 Risk 

A function of the probability of an adverse health effect 
and the severity of that effect consequential to a 
hazard(s) in food. 

2.9 Risk Analysis 

A process consisting of three components : risk 
assessment, risk management and risk communica- 
tion. 

2.10 Risk Assessment 

A scientifically based process consisting of the 
following steps: 

a) Hazard identification, 

b) Hazard characterization, 

c) Exposure assessment, and 

d) Risk characterization. 

2.11 Risk Characterization 

The process of determining the qualitative and/or 
quantitative estimation, including attendant uncertain- 
ties, of the probability of occurrence and severity of 
known or potential adverse health effects in a given 
population based on hazard identification, hazard 
characterization and exposure assessment. 

2.12 Risk Communication 

The interactive exchange of information and opinions 
concerning risk, and risk management, among risk 
assessors, risk managers, consumers, and other interes- 
ted parties. 

2.13 Risk Estimate 

Output of risk characterization. 
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2.14 Risk Management 

The process of weighing policy alternatives, in the 
light of risk assessment and, if required, selecting and 
implementing appropriate control options including 
regulatory measures. 

NOTE — Control means prevention, elimination, or reduction 
of hazards and/or minimization of risks. 

2.15 Sensitivity Analysis 

A method used to examine the behaviour of a model 
by measuring the variation in its outputs resulting from 
changes to its inputs. 

2.16 Transparent 

Characteristics of a process where the rationale, the 
logic of development constraints, assumptions, value 
judgements, decisions, limitations and uncertainties 
of the expressed determination are fully and 
systematically stated, documented, and accessible for 
review. 

2.17 Uncertainty Analysis 

A method used to estimate the uncertainty associated 
with model inputs, assumptions and structure/form. 

3 GENERAL PRINCIPLES OF MICROBIO- 
LOGICAL RISK ASSESSMENT 

3.1 Microbiological risk assessment should be soundly 
based upon science. 

3.2 There should be a functional separation between 
risk assessment and risk management. 

3.3 Microbiological risk assessment should be 
conducted according to a structured approach that 
includes hazard identification, hazard characteri- 
zation, exposure assessment and risk characterization. 

3.4 A microbiological risk assessment should clearly 
state the purpose of the exercise including the form of 
risk estimate that will be the output. 

3.5 The conduct of a microbiological risk assessment 
should be transparent. 

3.6 Any constraints that impact on the risk assessment, 
such as cost, resources or time should be identified 
and their possible consequences described. 

3.7 The risk estimate should contain a description of 
uncertainty and where the uncertainty arose during 
the risk assessment process. 

3.8 Data should be such that uncertainty in the risk 
estimate can be determined; data and data collection 
systems should, as far as possible, be of sufficient 
quality and precision that uncertainty in the risk 
estimate is minimized. 



3.9 A microbiological risk assessment should explicitly 
consider the dynamics of microbiological growth, 
survival and death in foods and the complexity of the 
interaction (including sequelae) between human and 
agent following consumption as well as the potential 
for further spread. 

3.10 Wherever possible, risk estimates should be 
reassessed over time by comparison with independent 
human illness data. 

3.11 A microbiological risk assessment may need 
reevaluation, as new relevant information becomes 
available. 

4 GUIDELINES FOR APPLICATION 

4.0 These guidelines provide an outline of the elements 
of a microbiological risk assessment indicating the 
types of decisions that need to be considered at each 
step. 

4.1 General Consideration 

4.1.1 The elements of risk analysis are risk assessment, 
risk management and risk communication. The 
functional separation of risk assessment from risk 
management helps assure that the risk assessment 
process is unbiased. However, certain interactions are 
needed for a comprehensive and systematic risk 
assessment process. These may include ranking of 
hazards and risk assessment policy decisions. Where 
risk management issues are taken into account in risk 
assessment, the decision-making process should be 
transparent. It is the transparent unbiased nature of 
the process that is important, not who is the assessor 
or who is the manager. 

4.1.2 Whenever practical, efforts should be made to 
provide a risk assessment process that allows 
contributions by interested parties. Contributions by 
interested parties in the risk assessment process can 
improve the transparency of the risk assessment, 
increase the quality of risk assessment through 
additional expertise and information, and facilitate risk 
communication by increasing the credibility and 
acceptance of the results of risk assessment. 

4.1.3 Scientific evidence may be limited, incomplete 
or conflicting. In such cases, transparent informed 
decisions will have to be made on how to complete 
the risk assessment process. The importance of using 
high quality information when conducting a risk 
assessment is to reduce uncertainty and to increase 
the reliability of the risk estimate. The use of 
quantitative information is encouraged to the extent 
possible, but the value and utility of qualitative 
information should not be discounted. 
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4.1.4 It should be recognized that sufficient resources 
will not always be available and constraints are likely 
to be imposed on the risk assessment that will influence 
the quality of the risk estimate. Where such resource 
constraints apply, it is important for transparency 
purposes that these constraints be described in the 
formal record. Where appropriate, the record should 
include an evaluation of the impact of the resource 
constraints on the risk assessment. 

4.2 Statement of Purpose of Risk Assessment 

4.2.1 At the beginning of the work, the specific purpose 
of the particular risk assesment being carried out 
should be clearly stated. The output form and possible 
output alternatives of the risk assessment should be 
defined. Output might, for example, take the form of 
an estimate of the prevalence of illness, or an estimate 
of annual rate (incidence of human illness 
per 1 00 000) or an estimate of the rate of human 
illness and severity per eating occurrence. 

4.2.2 The microbiological risk assessment may require 
a preliminary investigation phase. In this phase, 
evidence to support farm-to-table modelling of risk 
might be structured or mapped into the framework of 
risk assessment. 

4.3 Hazard Identification 

4.3.1 For microbial agents, the purpose of hazard 
identification is to identify the microorganisms or the 
microbial toxins of concern with food. Hazard 
identification will predominately be a qualitative 
process. Hazards can be identified from relevant data 
sources. Information on hazards can be obtained from 
scientific literature, from databases, such as those in 
the food industry, government agencies, and relevant 
international organizations and through solicitation 
of opinions of experts. Relevant information includes 
data in areas, such as clinical studies, epidemiological 
studies and surveillance, laboratory animal studies, 
investigations of the characteristics of microorganisms, 
the interaction between microorganisms and their 
environment through the food chain from primary 
production up to and including consumption, and 
studies on analogous microorganisms and situations. 

4.4 Exposure Assessment 

4.4.1 Exposure assessment includes an assessment of 
the extent of actual or anticipated human exposure. 
For microbiological agents, exposure assessments 
might be based on the potential extent of food 
contamination by a particular agent or its toxins, and 
on dietary information. Exposure assessment should 
specify the unit of food that is of interest, that is, the 
portion size in most/all cases of acute illness. 



4.4.2 Factors that must be considered for exposure 
assessment include the frequency of contamination of 
foods by the pathogenic agent and its level in those 
foods over time. For example, these factors are 
influenced by the characteristics of the pathogenic 
agent, the microbiological ecology of the food, the 
initial contamination of the raw material including 
considerations of regional differences and seasonality 
of production, the level of sanitation and process 
controls, the methods of processing, packaging, 
distribution and storage of the foods as well as any 
preparation steps, such as cooking and holding. 
Another factor that must be considered in the 
assessment is pattern of consumption. This relates to 
socio-economic and cultural backgrounds, ethnicity, 
seasonality, age differences (population demo- 
graphics), regional differences, and consumer 
preferences and behaviour. Other factors to be 
considered include the role of the food handler as a 
source of contamination, the amount of the hand 
contact with the product, and the potential impact of 
abusive environmental time/temperature relationships. 

4.4.3 Microbial pathogen levels can be dynamic and 
while they may be kept low, for example, by proper 
time/temperature controls during food processing, they 
can substantially increase with abuse conditions (for 
example, improper food storage temperatures or cross 
contamination from other foods). Therefore, the 
exposure assessment should describe the pathway from 
production to consumption. Scenarios can be 
constructed to predict the range of possible exposures. 
The scenarios might reflect effects of processing, such 
as hygienic design, cleaning and disinfection as well 
as the time/temperature and other conditions of the 
food history, food handling and consumption patterns, 
regulatory controls, and surveillance systems. 

4.4.4 Exposure assessment estimates the level, within 
various levels of uncertainty, of microbiological 
pathogens or microbiological toxins, and the 
likelihood of their occurrence in foods at the time of 
consumption. Qualitatively, foods can be categorized 
according to the likelihood that the foodstuff will or 
will not be contaminated at its source; whether or not 
the food can support the growth of the pathogen of 
concern; whether there is substantial potential for 
abusive handling of the food; or whether the food will 
be subjected to a heat process. The presence, growth, 
survival, or death of microorganisms including 
pathogens in foods are influenced by processing and 
packaging, the storage environment including the 
temperature of storage, the relative humidity of the 
environment, and the gaseous composition of the 
atmosphere. Other relevant factors include pH, 
moisture content or water activity (aw), nutrient 
content, the presence of anti-microbial substances, and 
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competing microflora. Predictive microbiology can be 
a useful tool in an exposure assessment 

4.5 Hazard Characterization 

4.5.1 This step provides a qualitative or quantitative 
description of the seventy and duration of adverse 
effects that may result from the ingestion of a 
microorganism or its toxin in food. A dose-response 
assessment should be performed if the data are 
obtainable. 

4.5.2 There are several important factors that need to 
be considered in hazard characterization. These are 
related to both the microorganism and the human host. 
In relation to the microorganism, the following are 
important: 

a) Microorganisms are capable of replicating; 
the virulence and infectivity of micro- 
organisms can change depending on their 
interaction with the host and the environ- 
ment; 

b) Genetic material can be transferred between 
microorganisms leading to the transfer of 
characteristics, such as antibiotic resistance 
and virulence factors; 

c) Microorganisms can be spread through 
secondary and tertiary transmission; 

d) The onset of clinical symptoms can be sub- 
stantially delayed following exposure; 

e) Microorganisms can persist in certain 
individuals leading to continued excretion of 
the microorganism and continued risk of 
spread of infection; 

f) Low doses of some microorganisms can in 
some cases cause a severe effect; and 

g) The attributes of a food that may alter the 
microbial pathogenicity, for example high fat 
content of a food vehicle. 

4.5.3 In relation to the host, the following may be 
important: 

a) Genetic factors, such as human leucocyte 
antigen (HLA) type; 

b) Increased susceptibility due to breakdowns 
of physiological barriers; 

c) Individual host susceptibility characteristics, 
such as age, pregnancy, nutrition, health and 
medication status, concurrent infections, 
immune status and previous exposure history; 
and 

d) Population characteristics such as population 
immunity, access to and use of medical care, 
and persistence of the organism in the 
population. 



4.5.4 A desirable feature of hazard characterization is 
ideally establishing a dose-response relationship. 
When establishing a dose-response relationship, the 
different end points, such as infection or illness should 
be taken into consideration. In the absence of a known 
dose-response relationship, risk assessment tools such 
as expert elicitation could be used to consider various 
factors, such as infectivity necessary to describe hazard 
characterizations. Additionally, experts may be able 
to devise ranking systems so that they can be used to 
characterize severity and/or duration of disease. 

4.6 Risk Characterization 

4.6.1 Risk characterization represents the integration 
of the hazard identification, hazard characterization, 
and exposure assessment determinations to obtain a 
risk estimate; providing a qualitative or quantitative 
estimate of the likelihood and severity of the adverse 
effects which could occur in a given population 
including a description of the uncertainties associated 
with these estimates. These estimates can be assessed 
by comparison with independent epidemiological data 
that relate hazards to disease prevalence. 

4.6.2 Risk characterization brings together all of the 
qualitative or quantitative information of the previous 
steps to provide a soundly based estimate of risk for a 
given population. Risk characterization depends on 
available data and expert judgements. The weight of 
evidence integrating quantitative and qualitative data 
may permit only a qualitative estimate of risk. 

4.6.3 The degree of confidence in the final estimation of 
risk will depend on the variability, uncertainty and 
assumptions identified in all previous steps. Differen- 
tiation of uncertainty and variability is important in 
subsequent selections of risk management options. 
Uncertainty is associated with the data themselves, and 
with the choice of model. Data uncertainties include those 
that might arise in the evaluation and extrapolation of 
information obtained from epidemiological, micro- 
biological, and laboratory animal studies. 

4.6.4 Uncertainties arise whenever attempts are made 
to use data concerning the ocurrence of certain 
phenomena obtained under one set of conditions to 
make estimations or predictions about phenomena 
likely to occur under other sets of conditions for wh ich 
data are not available. Biological variation includes 
the differences in virulence that exist in micro- 
biological populations and variability in susceptibility 
within the human population and particular sub- 
populations. 

4.6.5 It is important to demonstrate the influence of 
estimates and assumptions used in risk assessment. 
For quantitative risk assessment, this can be done using 
sensitivity and uncertainty analyses. 
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4.7 Documentation 

The risk assessment should be fully and systematically 
documented and communicated to the risk manager. 
Understanding any limitations that influenced a risk 
assessment is essential for transparency of the process 
that is important in decision making. For example, 
expert judgements should be identified and their 
rationale explained. To ensure a transparent risk 
assessment a formal record including a summary 
should be prepared and made available to interested 
independent parties so that other risk assessors can 
repeat and critique the work. The formal record and 
summary should indicate any constraints, 
uncertainties, and assumptions and their impact on 
the risk assessment. 



4.8 Reassessment 

Surveillance programmes can provide an ongoing 
opportunity to reassess the public health risks 
associated with pathogens in foods as new relevant 
information and data become available. Micro- 
biological risk assessors may have the opportunity to 
compare the predicted risk estimate from micro- 
biological risk assessment model with reported human 
illness data for the purpose of gauging the reliability 
of the predicted estimate. This comparison emphasizes 
the iterative nature of modelling. When new data 
become available, a microbiological risk assessment 
may need to be revisited. 
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